3 ms·
You realize that you didn't need to wait for PAM? That you could read NSS `shadow' table from LDAP in the same way as `passwd' is?
by dozzie 10y ago
You realize that you didn't need to wait for PAM? That you could read NSS
`shadow' table from LDAP in the same way as `passwd' is?
- otterley 10y agoOn all the Linux distributions I've used in the last 15 years, NSS has never been responsible for authentication, though. It's only been responsible for resolution actions like getpw* and getgr* (i.e. uid/gid to name), whereas PAM has been responsible for authentication and auditing. You have to configure both to support LDAP, not just one.